What is Ransomware?

Ransomware is malware that encrypts a company's files and demands a ransom to restore them, often with a threat to publish the stolen data as well. Attacks usually begin with a phishing email or a stolen password.

There are three layers of defence: an employee who spots the phishing email, two-factor authentication that makes a stolen password useless, and tested backups kept isolated from the network.

How to spot it

  • Files with an unfamiliar extension
  • A text file demanding payment

What to do

  • Disconnect the computer from the network immediately
  • Don't switch it off or delete anything; call IT

Related courses

Terms on this topic

More topics

← Cybersecurity glossary

Start with your team's risk baseline

15-30 employees, one phishing simulation and a one-page report for management. No annual commitment.